EAC and Apex Legends RCE Exploit: What You Need to Know

Summary

The Cimmarian community is discussing the recent security concerns surrounding Easy Anti-Cheat (EAC) and potential Remote Code Execution (RCE) exploits in games like Apex Legends. This announcement clarifies the technical nuances between engine-level vulnerabilities and anti-cheat software, urging members to stay informed and cautious. It serves as a vital update for gamers to understand the risks and necessary precautions for their PC security.

magicquartz-63 OP

https://www.dexerto.com/apex-legends/massive-apex-legends-hack-explained-algs-impact-culprit-more-2595554/

magicquartz-63 OP
magicquartz-63 OP

This affects all EAC games including VRChat, Dead By Daylight etc.

youngengine-39

oh... woohoo

magicquartz-63 OP

If infected you'll need to wipe your PC.

youngengine-39

Oh, of course it'd be an RCE exploit. I don't think it would be one that's done because of EAC, or at least, I can't think of a vector where someone could use EAC for that?

youngengine-39

It's typically a game engine issue, afaik

youngengine-39

Apex Legends is still using a heavily modified version of Source, aren't they? Valve has had a lot of RCE related issues in the past, I wouldn't put it past the hacker using that knowledge to expoit that vulnerability.

youngengine-39

Even CS2 had it's bouts with unintended payloads because people decided to change their username to a url that could load something from the internet
https://youtu.be/nJBkDTx5fPk

youngengine-39

It was mostly an issue with TF2, CS:GO, then CS2. But Valve has been doing a lot more RCE patches over the past 4 years iirc

eagercomet-16

Oof

eagercomet-16

Glad I read that before playing any of the games

magicquartz-63 OP

If it's 100% legit then it's within the source engine. Something EA has not patched yet.

youngengine-39

The outdated source code leak isn't in relation to the (fairly) recent remote code execution exploits. Though I really enjoyed reading some of the code comments out of context.

youngengine-39

Yeah, I was pretty confident that it wasn't on EAC's end. So it did bother me that everyone jumped to the immediate conclusion that it was entirely on EAC.

eagercomet-16

I get what you mean. It's always good to be safe but people tend to blow things up which leads to false information usually because they don't understand the matter

eagercomet-16

And all this fear-mongering is getting old

eagercomet-16

If you don't know for sure, say so. We're all misinformed at times.

eagercomet-16

Thanks for listening to my Ted Talk

eagercomet-16

Yeah, there's definitely those who like to jump on the bandwagon for that

The latest from Cimmarian